Dumplie · Legal

Privacy Policy

Effective date: 09.09.2026

1. Controller

The controller within the meaning of Article 4(7) GDPR is:

konax media Günther Fick GbR
Weberstraße 30
23966 Wismar
Germany
Email: info@konax-media.de
Phone: +49 176 86262895

Contact for privacy questions: Konstantin Günther - info@konax-media.de

2. Scope and overview

This Privacy Policy applies to the Dumplie iOS app. When you visit konax-media.de, the general website privacy policy also applies.

You can use Dumplie without registering or creating an account. We do not operate our own user or game-state server for the game. Your game state and settings generally remain on your device. Network connections are made to Google for consent management and advertising and to Apple for product information, purchases, and verification of Premium access.

3. Game and settings data stored locally

Dumplie stores the data needed to provide the features you select on your device:

  • Your high score, discovered dumplings, and an active round
  • Game-state data such as points, characters, positions, combinations, and whether a revive has already been used in the round
  • Language and settings for music, volume, sound, and haptic feedback
  • Your selected Dumpling Pack
  • Your use and daily balance of free Premium revives
  • The time of the last full-screen ad so that ad intervals can be observed

This data is not transmitted to us. It is processed to provide the game and the settings you expressly request. The legal basis is Article 6(1)(b) GDPR. Storage on the device is permitted under section 25(2)(2) TDDDG to the extent strictly necessary to provide the app features you request.

The data remains stored until it is overwritten by the app, removed by the operating system, or the app is deleted. You can completely remove this local data by deleting Dumplie. If your device includes app data in a device or iCloud backup, storage and deletion depend on your Apple settings. We cannot access these backups.

4. Advertising and consent management with Google

a) Services and providers

Dumplie uses the Google Mobile Ads SDK (AdMob) to display ads and the Google User Messaging Platform SDK (UMP) to request and manage privacy choices. The provider in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Depending on the processing, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and the advertising partners identified in the consent form may also be involved.

b) Ads in Dumplie

In the free version, a full-screen ad may appear after a lost round. You can also voluntarily choose a rewarded ad to revive a round once. Premium removes automatic ad interruptions. Voluntary revive ads remain available after the daily Premium revives have been used and start only after you select them.

c) Data and purposes

According to Google, the Mobile Ads SDK may process the following data in particular:

  • IP address and an approximate location derived from it
  • Device identifiers, such as Google's app-scoped Publisher First-Party ID and—only with your permission through Apple App Tracking Transparency—the iOS advertising identifier IDFA
  • Advertising data, such as ads served or viewed
  • Interactions with ads and the app, such as app launches, taps, or video views
  • SDK diagnostic, crash, and performance data, such as launch time, hang rate, or energy use
  • Privacy choices and technical consent signals from UMP

The data may be used to deliver ads and limit their frequency, to measure advertising performance, for billing, to prevent fraud and abuse, and to maintain and improve the stability of advertising services. After valid consent, it may also be used to personalize advertising and create advertising profiles.

Dumplie is intended for a mature audience, limits ads to Google's maximum content rating “Mature,” and does not categorically mark ad requests as child-directed. If Apple permits cross-app tracking, Dumplie additionally applies the relevant UMP choices. Without Apple tracking permission, Dumplie explicitly disables ad personalization and Google's Publisher First-Party ID; the IDFA is not transmitted.

d) Legal bases and access to the device

Where consent is required, storing or accessing information on your device is based on section 25(1) TDDDG, and the subsequent processing of personal data is based on Article 6(1)(a) GDPR.

Where delivery in a particular case does not require consent or a purpose identified in the UMP form relies on legitimate interests, data is processed only to the extent required for that purpose on the basis of Article 6(1)(f) GDPR. Our legitimate interests are financing the free app, secure technical delivery, billing, and fraud prevention. Access to your device without consent takes place only where the requirements of section 25(2) TDDDG are met.

e) Consent, ad-serving modes, and withdrawal

When the app starts, UMP updates the consent status applicable to your device and, where required, presents a consent form. Dumplie requests ads only when UMP permits this based on the current status.

Where personalized advertising or cross-app advertising measurement may be used, Apple's App Tracking Transparency system prompt is an additional step. Consent in the Google form does not replace Apple permission. Personalized ads and the IDFA are possible only when the applicable UMP choices permit them and Apple tracking permission has been granted. Otherwise, Dumplie requests non-personalized, limited, or purely technical ad delivery.

Consent is voluntary. You can change or withdraw it at any time with future effect in Dumplie under “Settings – Ad Privacy Options.” You can separately change Apple's tracking permission under “Privacy & Security – Tracking” in iOS Settings. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

f) Recipients and advertising partners

Google may disclose data to the advertising partners listed in the UMP form. The specific list depends on the configuration published in AdMob and may change. You can view the providers, purposes, and legal bases involved at the time of your decision under “Manage options” in the UMP form. Google provides information about managing advertising partners on this page.

g) Further information and retention

Google explains processing in apps that use Google services in “How Google uses information from sites or apps that use our services” and in the Google Privacy Policy. Google and the relevant advertising partners determine retention according to the purpose and their legal obligations. UMP choices stored locally remain until you change them, they expire, UMP resets them, or the app data is deleted.

5. Premium purchase and Apple StoreKit

Dumplie uses Apple StoreKit to display the price of the one-time Premium purchase, process purchases through the App Store, restore existing purchases, and verify Premium access. The provider is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Other Apple entities may be responsible depending on your place of residence.

Apple handles payment and your Apple Account. Dumplie receives from StoreKit the product and transaction information and verified entitlement status required to unlock Premium. We do not operate our own purchase server and do not receive full payment details such as credit-card or bank-account information through the app. The legal basis for unlocking and managing Premium is Article 6(1)(b) GDPR. Apple processes App Store data under its own responsibility and provides details in App Store & Privacy.

6. No accounts or first-party analytics

Dumplie does not offer user accounts and does not use first-party analytics, profiling, social-media, location, contacts, photos, microphone, or health services. We do not operate our own crash reporting. This does not affect the Google processing related to ads or the Apple processing related to the App Store described above.

7. Contacting us

If you contact us by email, we process your email address, the content of your message, and any other information you voluntarily provide in order to handle your request. The legal basis is Article 6(1)(b) GDPR where the request concerns a contract or purchase, and otherwise Article 6(1)(f) GDPR. Our legitimate interest is responding to inquiries and supporting the app.

Your message is sent through the email provider you choose. Our mailbox is technically operated by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, as a processor. The data is deleted once the matter has been resolved, unless statutory retention or evidence obligations require longer storage. See the STRATO Privacy Policy for more information.

8. Recipients

Personal data is made available only to parties that need it for the purposes described. These may include Google and selected advertising partners, Apple, STRATO and the email provider you use, and authorities or courts where disclosure is legally required. Any other disclosure takes place only with consent or on another statutory basis.

We disclose personal data only to parties that are contractually or legally required to provide the same or an equivalent level of protection as described in this Privacy Policy and required by the App Store rules applicable to Dumplie.

9. International transfers

Google, advertising partners, and Apple may process data outside the European Economic Area, particularly in the United States. Transfers take place in accordance with Articles 44 et seq. GDPR, in particular on the basis of an adequacy decision such as the EU-US Data Privacy Framework for certified recipients or the European Commission's Standard Contractual Clauses with any necessary supplementary safeguards.

Information about the safeguards used and the availability of the Standard Contractual Clauses is available from Google, Apple, and the European Commission. You can also request a copy of the safeguards relevant to a specific processing activity at info@konax-media.de, insofar as this does not adversely affect the rights of third parties.

10. Retention and deletion

The periods stated in the relevant sections apply to local app data, UMP choices, and contact requests. Google, advertising partners, and Apple retain data under their own deletion policies and legal obligations. Specific periods may vary according to data type, purpose, region, and account setting. Aggregated or effectively anonymized data may be retained longer where it can no longer be linked to an individual.

Because Dumplie has no user accounts and we operate no user or game-state server, we cannot remotely access or erase local app data. You can remove it by deleting the app. You can request deletion of personal data from a support request at info@konax-media.de. Where Google or Apple acts as an independent controller, you may also submit access or deletion requests directly to that provider.

11. Providing data and consequences of not providing it

You are not legally or contractually required to provide personal data to us or to consent to advertising or tracking. Dumplie remains playable without tracking permission and without consent to personalized advertising. Depending on your region, consent status, and available demand, non-personalized, limited, or no ads may then appear. A voluntary ad-based revive is available only when Google supplies a suitable ad.

The Premium purchase is voluntary. Without the processing required by Apple, the purchase cannot be completed, restored, or verified on a device. Contacting us by email is also voluntary; without the information needed to process your request, we may be unable to answer it.

12. Your rights

Subject to the statutory requirements, you have the right of access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), data portability (Article 20 GDPR), and objection (Article 21 GDPR). You may withdraw consent at any time with future effect (Article 7(3) GDPR). This does not affect the lawfulness of processing carried out before withdrawal.

Where processing is based on Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. You may object to direct marketing without giving reasons.

Send requests to info@konax-media.de. Where Google, an advertising partner, or Apple processes data as an independent controller, you may also exercise your rights directly with that provider.

13. Right to lodge a complaint

Under Article 77 GDPR, you may lodge a complaint with a data protection supervisory authority. The authority generally responsible for us is:

The State Commissioner for Data Protection and Freedom of Information Mecklenburg-Western Pomerania
Werderstraße 74a
19055 Schwerin
Germany
Phone: +49 385 59494 0
Email: info@datenschutz-mv.de
www.datenschutz-mv.de

14. Automated decisions and profiling

We do not make decisions based solely on automated processing within the meaning of Article 22 GDPR that produce legal effects concerning you or similarly significantly affect you. If you provide the required consents, Google and the advertising partners identified in the UMP form may create usage and interest profiles to select personalized ads and measure their performance. Dumplie disables ad personalization without those permissions.

15. Minors

Dumplie is not directed to children and is intended only for people at or above the elevated age rating displayed in the relevant App Store. The app does not collect a date of birth or perform its own age verification. Minors below that rating should not use the app; parents and guardians can use the device's parental and purchase controls.

16. Security and changes

We use appropriate technical and organizational measures to protect personal data against loss, unauthorized access, and alteration. This Privacy Policy will be updated if app features, providers, or legal requirements change. The version published at this address is the current version.

Effective date: 09.09.2026